Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59e99882-7041-4e7e-9291-f73c065a106e.roa
File: 59e99882-7041-4e7e-9291-f73c065a106e.roa (raw, json)
Hash identifier: wB3QtZzeyACJVM2q/l7XK6P6x1MR7GHJnuNIIUPFvTo=
Subject key identifier: 0B:8D:4E:9C:A0:BF:D6:F8:74:3A:B2:28:11:E9:96:D7:75:EF:AA:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F6C12295D87C1B9023CB9874BA6FEFF5976E091
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59e99882-7041-4e7e-9291-f73c065a106e.roa
Signing time: Mon 31 Mar 2025 21:20:06 +0000
ROA not before: Mon 31 Mar 2025 21:20:06 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d027::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6c:12:29:5d:87:c1:b9:02:3c:b9:87:4b:a6:fe:ff:59:76:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:20:06 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:b1:d0:bf:9a:bf:59:eb:2d:74:f7:c0:73:
b9:a6:70:2d:17:b2:19:77:12:4e:51:dc:a6:4d:0e:
f9:60:7e:0c:51:dc:f4:0a:9e:ad:5b:97:01:8b:14:
a9:72:86:34:57:c0:58:b1:97:2b:3d:8d:98:5a:b7:
88:05:7c:65:42:3a:9c:70:6a:94:6d:5b:f1:32:a0:
25:3c:38:d7:c0:3f:37:55:be:e3:2c:9d:2b:6d:53:
7c:ab:99:60:cc:d0:4b:3a:74:17:a4:b8:5e:11:2f:
83:b5:90:d2:e1:18:f6:25:b7:d1:e1:6d:b9:a9:6e:
66:d6:9b:85:4c:9a:52:f9:69:4b:77:ba:6a:83:16:
f9:81:7b:54:ae:7b:f2:a5:6d:cf:25:89:56:b2:0e:
bd:86:9f:94:a9:00:0d:b6:84:54:09:fc:44:64:c7:
5b:38:24:a9:15:f8:b8:7d:1e:9f:3b:99:85:ff:09:
91:89:55:9d:2a:ed:2d:2e:22:b4:2b:64:5d:0a:3f:
3c:b3:c9:8f:c2:61:55:29:30:78:6f:cb:e2:9e:be:
8b:e1:cb:6b:cf:33:28:6c:b9:16:69:da:11:a3:08:
c2:ed:07:97:73:63:06:3a:55:bf:ba:68:09:5e:fe:
ba:6b:05:c5:25:34:9b:de:6d:41:ef:fe:ff:6a:ce:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:4E:9C:A0:BF:D6:F8:74:3A:B2:28:11:E9:96:D7:75:EF:AA:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59e99882-7041-4e7e-9291-f73c065a106e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d027::/37
Signature Algorithm: sha256WithRSAEncryption
26:15:4f:c3:92:8e:65:b5:a7:4a:b0:28:13:a0:a9:aa:c2:29:
07:f0:99:49:f9:28:2b:64:dc:e1:81:e5:fb:07:19:af:a0:d7:
b3:84:ba:7b:a0:cd:a4:e5:76:e9:f0:b0:68:f6:81:f2:9d:68:
17:a6:95:16:e7:55:14:c6:fe:de:38:20:3f:41:0c:cc:23:58:
2f:8f:75:a0:8d:f9:28:b0:6a:b8:0a:6c:f7:e6:61:11:80:28:
14:ba:f1:6d:65:a0:bf:8c:0d:88:4b:3e:dc:c3:36:e5:ca:89:
0f:88:a2:a8:2b:72:d7:3e:c5:38:53:d1:1a:9b:a8:2c:a1:70:
a5:19:38:d5:0c:49:bf:a2:a3:22:ae:a3:12:e9:1e:72:37:14:
e5:1d:3a:d0:7a:0b:20:f6:88:c4:47:92:75:cb:82:10:17:7f:
73:5a:21:ba:61:17:88:9c:c9:94:11:d4:ce:4e:d8:89:3a:dd:
fa:12:0c:9e:e9:b2:73:97:b5:e7:c2:6b:a0:8d:49:ca:d5:8f:
78:0c:6e:e3:02:0c:3b:a3:30:42:26:21:c3:78:af:6d:f4:81:
5f:0f:ae:33:54:44:5c:c3:c4:de:04:e8:72:6d:d7:83:fe:30:
83:02:47:cc:12:0f:cc:11:b4:ed:8b:47:90:ed:66:35:98:7c:
6d:97:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:48:55 2025 by rpki-client